|
 |
9e4319 |
From 174b42b2943200a7b2ec2dab6c3445158aa04aba Mon Sep 17 00:00:00 2001
|
|
|
9e4319 |
From: Eric Garver <egarver@redhat.com>
|
|
|
9e4319 |
Date: Tue, 25 May 2021 13:31:41 -0400
|
|
|
9e4319 |
Subject: [PATCH] RHEL only: Add cockpit by default to some zones
|
|
|
9e4319 |
|
|
|
9e4319 |
Fixes: #1581578
|
|
|
9e4319 |
---
|
|
|
9e4319 |
config/zones/home.xml | 1 +
|
|
|
9e4319 |
config/zones/internal.xml | 1 +
|
|
|
9e4319 |
config/zones/public.xml | 1 +
|
|
|
9e4319 |
config/zones/work.xml | 1 +
|
|
|
9e4319 |
src/tests/functions.at | 20 ++++++++++++++++++++
|
|
|
9e4319 |
5 files changed, 24 insertions(+)
|
|
|
9e4319 |
|
|
|
9e4319 |
diff --git a/config/zones/home.xml b/config/zones/home.xml
|
|
|
9e4319 |
index d73c9bdb16b6..33064688367e 100644
|
|
|
9e4319 |
--- a/config/zones/home.xml
|
|
|
9e4319 |
+++ b/config/zones/home.xml
|
|
|
9e4319 |
@@ -6,5 +6,6 @@
|
|
|
9e4319 |
<service name="mdns"/>
|
|
|
9e4319 |
<service name="samba-client"/>
|
|
|
9e4319 |
<service name="dhcpv6-client"/>
|
|
|
9e4319 |
+ <service name="cockpit"/>
|
|
|
9e4319 |
<forward/>
|
|
|
9e4319 |
</zone>
|
|
|
9e4319 |
diff --git a/config/zones/internal.xml b/config/zones/internal.xml
|
|
|
9e4319 |
index 053c18ccda8b..852b16ad94dd 100644
|
|
|
9e4319 |
--- a/config/zones/internal.xml
|
|
|
9e4319 |
+++ b/config/zones/internal.xml
|
|
|
9e4319 |
@@ -6,5 +6,6 @@
|
|
|
9e4319 |
<service name="mdns"/>
|
|
|
9e4319 |
<service name="samba-client"/>
|
|
|
9e4319 |
<service name="dhcpv6-client"/>
|
|
|
9e4319 |
+ <service name="cockpit"/>
|
|
|
9e4319 |
<forward/>
|
|
|
9e4319 |
</zone>
|
|
|
9e4319 |
diff --git a/config/zones/public.xml b/config/zones/public.xml
|
|
|
9e4319 |
index 49fc4c20af52..62bc751de448 100644
|
|
|
9e4319 |
--- a/config/zones/public.xml
|
|
|
9e4319 |
+++ b/config/zones/public.xml
|
|
|
9e4319 |
@@ -4,5 +4,6 @@
|
|
|
9e4319 |
<description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
|
|
|
9e4319 |
<service name="ssh"/>
|
|
|
9e4319 |
<service name="dhcpv6-client"/>
|
|
|
9e4319 |
+ <service name="cockpit"/>
|
|
|
9e4319 |
<forward/>
|
|
|
9e4319 |
</zone>
|
|
|
9e4319 |
diff --git a/config/zones/work.xml b/config/zones/work.xml
|
|
|
9e4319 |
index f1a14a9b4682..27b54a7783c4 100644
|
|
|
9e4319 |
--- a/config/zones/work.xml
|
|
|
9e4319 |
+++ b/config/zones/work.xml
|
|
|
9e4319 |
@@ -4,5 +4,6 @@
|
|
|
9e4319 |
<description>For use in work areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
|
|
|
9e4319 |
<service name="ssh"/>
|
|
|
9e4319 |
<service name="dhcpv6-client"/>
|
|
|
9e4319 |
+ <service name="cockpit"/>
|
|
|
9e4319 |
<forward/>
|
|
|
9e4319 |
</zone>
|
|
|
9e4319 |
diff --git a/src/tests/functions.at b/src/tests/functions.at
|
|
|
9e4319 |
index 3f343ef49de1..c950a3c7a1a6 100644
|
|
|
9e4319 |
--- a/src/tests/functions.at
|
|
|
9e4319 |
+++ b/src/tests/functions.at
|
|
|
9e4319 |
@@ -106,6 +106,14 @@ m4_define([FWD_START_TEST], [
|
|
|
9e4319 |
fi
|
|
|
9e4319 |
|
|
|
9e4319 |
m4_ifdef([TESTING_FIREWALL_OFFLINE_CMD], [
|
|
|
9e4319 |
+ AT_KEYWORDS(offline)
|
|
|
9e4319 |
+ dnl cockpit is added by default downstream, but upstream tests don't expect
|
|
|
9e4319 |
+ dnl it. Simply remove it at the start of every test.
|
|
|
9e4319 |
+ dnl
|
|
|
9e4319 |
+ FWD_OFFLINE_CHECK([--zone home --remove-service-from-zone cockpit], 0, [ignore])
|
|
|
9e4319 |
+ FWD_OFFLINE_CHECK([--zone internal --remove-service-from-zone cockpit], 0, [ignore])
|
|
|
9e4319 |
+ FWD_OFFLINE_CHECK([--zone public --remove-service-from-zone cockpit], 0, [ignore])
|
|
|
9e4319 |
+ FWD_OFFLINE_CHECK([--zone work --remove-service-from-zone cockpit], 0, [ignore])
|
|
|
9e4319 |
], [
|
|
|
9e4319 |
dnl set the appropriate backend
|
|
|
9e4319 |
AT_CHECK([sed -i 's/^FirewallBackend.*/FirewallBackend=FIREWALL_BACKEND/' ./firewalld.conf])
|
|
|
9e4319 |
@@ -237,6 +245,18 @@ m4_define([FWD_START_TEST], [
|
|
|
9e4319 |
])
|
|
|
9e4319 |
|
|
|
9e4319 |
FWD_START_FIREWALLD
|
|
|
9e4319 |
+
|
|
|
9e4319 |
+ dnl cockpit is added by default downstream, but upstream tests don't expect
|
|
|
9e4319 |
+ dnl it. Simply remove it at the start of every test.
|
|
|
9e4319 |
+ dnl
|
|
|
9e4319 |
+ FWD_CHECK([--permanent --zone home --remove-service cockpit], 0, [ignore])
|
|
|
9e4319 |
+ FWD_CHECK([ --zone home --remove-service cockpit], 0, [ignore])
|
|
|
9e4319 |
+ FWD_CHECK([--permanent --zone internal --remove-service cockpit], 0, [ignore])
|
|
|
9e4319 |
+ FWD_CHECK([ --zone internal --remove-service cockpit], 0, [ignore])
|
|
|
9e4319 |
+ FWD_CHECK([--permanent --zone public --remove-service cockpit], 0, [ignore])
|
|
|
9e4319 |
+ FWD_CHECK([ --zone public --remove-service cockpit], 0, [ignore])
|
|
|
9e4319 |
+ FWD_CHECK([--permanent --zone work --remove-service cockpit], 0, [ignore])
|
|
|
9e4319 |
+ FWD_CHECK([ --zone work --remove-service cockpit], 0, [ignore])
|
|
|
9e4319 |
])
|
|
|
9e4319 |
])
|
|
|
9e4319 |
|
|
|
9e4319 |
--
|
|
|
9e4319 |
2.27.0
|
|
|
9e4319 |
|